HCL iControl was affected by Inadequate Session Timeout vulnerability. The vulnerability involves a security risk where a web application fails to automatically terminate user sessions after a period of inactivity
https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0131511